Uncontrolled Search Path Vulnerability in Intel Quartus Prime Software
CVE-2023-24016

7.3HIGH

Key Information:

Vendor

Intel
Status
Intel(R) Quartus(R) Prime Pro and Standard edition software for linux
Vendor
CVE Published:
11 August 2023

What is CVE-2023-24016?

An uncontrolled search path element vulnerability exists in some versions of Intel(R) Quartus(R) Prime Pro and Standard edition software for Linux. This issue may allow an authenticated user to escalate privileges through local access, potentially compromising system integrity and security. Users are advised to review their configurations and apply any recommended updates or mitigations.

Affected Version(s)

Intel(R) Quartus(R) Prime Pro and Standard edition software for linux See references

References

http://www.intel.com/content/www/us/en/security-center/ad...

CVSS V3.1

Score:
7.3
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.